(a) List the AAA access controls.
(b) Explain each in a sentence.
(c) What are the four bases for authentication credentials?
(d) What is two-factor authentication's promise?
(e) How can a Trojan horse defeat this promise?
(f) How can a man-in-the-middle attack defeat this promise?
(g) What is RBAC? (Do not just spell it out).
(h) Why is RBAC less expensive than access control based on individual accounts?
(i) Why is it less error-prone? (The answer is not specifically in the text.)
(j) Why do technologically strong access controls not provide strong access control in real organizations?